Security controls an individual user sets directly from the chatbox — approval mode, screen context, and execution mode — plus OS-level permissions and advanced security settings.

This page covers the security controls you set yourself, as an individual user, starting with the three controls available directly from the chatbox.

These are the main tasks to configure Delegate and Cartographer locally, in order:

Set from the mode selector next to the chatbox, and applies to all chats.

Approval mode sets the defaults for the granular, per-tool, per-file, and per-app/site controls — tool permissions, terminal and files, protected files, and UI automation — described in Security settings reference.

Screen context and execution mode both govern computer use for Delegate and Cartographer — what it can see, and how it acts on your screen.

Governs what it can see. Set from the screen icon next to the chatbox:

The chatbox also shows which apps are currently attached to the chat, since it only sees what's listed there when capturing your screen.

A related setting under Settings → General → General.

In Default mode, each user message gets one full-screen capture so "do this for me" works on cold start. Subsequent turns within the turn mask to attached apps. On by default.

Governs how it acts — whether it takes over your screen or works without touching it. Set from the computer icon next to the chatbox:

In the background expands into three sub-modes:

A separate Always plan before toggle, next to execution mode, has it review its plan with you before executing the task — this may consume more token units.

For On my screen and Ask before each app modes, where it takes over your screen, two auto-minimize settings keep it out of the way while it works:

For the Web only and Native Background sub-modes, you can select which named browser profile to use — this determines which cookies, logins, and extensions are available.

Beyond approval mode, Settings → Security holds four areas of fine-grained, per-tool, per-file, and per-app/site controls:

See Security settings reference for the full breakdown of each.

A user-selectable, security-relevant setting that lives outside Settings → Security: New tasks, under Settings → General → General.

Message content, including attachments and screen context screenshots, transits the UiPath backend for inference regardless of storage mode, but is not persisted server-side in Local mode.

Beyond approval mode, screen context, and execution mode, the operating system controls what Delegate and Cartographer can do — and always takes precedence: if Windows denies a permission, they cannot do that thing regardless of what you have set above.

The following table lists the permissions Delegate and Cartographer require on Windows.